Description
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1881637
https://github.com/amqphub/amqp-10-resource-adapter/issues/13
https://security.netapp.com/advisory/ntap-20201210-0001/
Related Vulnerabilities
CVE-2023-33941 Vulnerability in maven package com.liferay:com.liferay.oauth2.provider.rest
CVE-2023-4853 Vulnerability in maven package io.quarkus:quarkus-csrf-reactive
CVE-2023-29215 Vulnerability in maven package org.apache.linkis:linkis-common
CVE-2022-39218 Vulnerability in npm package @fastly/js-compute
CVE-2022-31175 Vulnerability in npm package @ckeditor/ckeditor5-html-embed